From a571d174ffe8f9abbd2ad1663e111bf8ab895e99 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 6 Jul 2025 19:14:24 +0000 Subject: [PATCH 1/8] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-2807585 - https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-2807585 - https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-2807585 - https://snyk.io/vuln/SNYK-DEBIAN10-SYSTEMD-3339153 - https://snyk.io/vuln/SNYK-DEBIAN10-SYSTEMD-3339153 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 586b12e858c..b6c72aec806 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM ruby:2.6.3-slim +FROM ruby:2.7.8-slim LABEL maintainer Travis CI GmbH # packages required for bundle install From 9edf452e8dfac8ff598bbe53e03330d2d0535758 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 6 Jul 2025 19:28:06 +0000 Subject: [PATCH 2/8] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-569598 - https://snyk.io/vuln/SNYK-RUBY-PUMA-8062124 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-7164639 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732769 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732779 - https://snyk.io/vuln/SNYK-RUBY-PUMA-2437090 - https://snyk.io/vuln/SNYK-RUBY-REXML-7577227 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10494060 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10494063 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2840634 - https://snyk.io/vuln/SNYK-RUBY-REXML-7814166 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2413994 - https://snyk.io/vuln/SNYK-RUBY-PUMA-2400629 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2620374 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630623 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630898 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-3052880 - https://snyk.io/vuln/SNYK-RUBY-PUMA-1291014 - https://snyk.io/vuln/SNYK-RUBY-TZINFO-2958048 - https://snyk.io/vuln/SNYK-RUBY-PUMA-5846204 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510795 - https://snyk.io/vuln/SNYK-RUBY-REXML-7577228 - https://snyk.io/vuln/SNYK-RUBY-REXML-8309365 - https://snyk.io/vuln/SNYK-RUBY-MIDDLEMANCORE-20359 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6228056 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-PUMA-6146928 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3237242 - https://snyk.io/vuln/SNYK-RUBY-REXML-6861566 - https://snyk.io/vuln/SNYK-RUBY-REXML-7462086 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510789 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9789079 - https://snyk.io/vuln/SNYK-RUBY-ERUBIS-20482 - https://snyk.io/vuln/SNYK-RUBY-PUMA-1730572 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8453714 --- Gemfile | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/Gemfile b/Gemfile index 78a22e4e954..16217b0962e 100644 --- a/Gemfile +++ b/Gemfile @@ -3,32 +3,32 @@ source 'https://rubygems.org' ruby '2.6.3' gem 'faraday' -gem 'html-proofer', '~> 3.0' +gem 'html-proofer', '~> 3.19', '>= 3.19.3' gem 'jekyll', '>=3.1.6' gem 'jekyll-paginate' gem 'jekyll-redirect-from' -gem 'puma' +gem 'puma', '>= 5.6.9' gem 'pry', group: :test gem 'rack', '~> 1.0' gem 'rack-jekyll' gem 'rack-ssl-enforcer' gem 'rake' gem 'rdiscount', '>=2.2.0.1' -gem 'rubocop', group: :test +gem 'rubocop', '>= 0.87.0', group: :test # All of this is for Slate / middleman -gem "middleman", '~> 3.0' +gem "middleman", "~> 4.6", ">= 4.6.0" # For syntax highlighting -gem "middleman-syntax" +gem "middleman-syntax", ">= 3.3.0" # Plugin for middleman to generate GitHub pages gem 'middleman-gh-pages' # Live-reloading plugin -gem "middleman-livereload" +gem "middleman-livereload", ">= 3.4.7" # Needed for Slate / middleman gem 'redcarpet' From fc785686c88fd44a575c5d18c7a28e88fd06315e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 8 Jul 2025 22:07:09 +0000 Subject: [PATCH 3/8] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-SYSTEMD-6277510 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index b6c72aec806..3f42432ac7d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM ruby:2.7.8-slim +FROM ruby:3.4.4-slim LABEL maintainer Travis CI GmbH # packages required for bundle install From a68c6308ceb449dbb93a386208c0a33dd7226612 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 11 Jul 2025 06:01:55 +0000 Subject: [PATCH 4/8] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674179 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674176 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674184 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674192 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674188 --- Gemfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile b/Gemfile index 16217b0962e..a0c60f2eb6a 100644 --- a/Gemfile +++ b/Gemfile @@ -19,7 +19,7 @@ gem 'rubocop', '>= 0.87.0', group: :test # All of this is for Slate / middleman -gem "middleman", "~> 4.6", ">= 4.6.0" +gem "middleman", "~> 4.1", ">= 4.1.8" # For syntax highlighting gem "middleman-syntax", ">= 3.3.0" From f28b05a22322ef6a2ec1eb97386f8ca73463a1c5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Sep 2025 00:47:48 +0000 Subject: [PATCH 5/8] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690985 - https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690987 - https://snyk.io/vuln/SNYK-DEBIAN12-PERL-5489190 - https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690990 - https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690993 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 3f42432ac7d..ada4d25b00c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM ruby:3.4.4-slim +FROM ruby:3.4.6-slim LABEL maintainer Travis CI GmbH # packages required for bundle install From d8799d89ab67cc9cdf8684e3ce6bb44b134a9558 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 19 Sep 2025 04:44:15 +0000 Subject: [PATCH 6/8] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN13-SQLITE3-12549228 - https://snyk.io/vuln/SNYK-DEBIAN13-APT-5675173 - https://snyk.io/vuln/SNYK-DEBIAN13-APT-5675173 - https://snyk.io/vuln/SNYK-DEBIAN13-COREUTILS-10259260 - https://snyk.io/vuln/SNYK-DEBIAN13-COREUTILS-5673914 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index ada4d25b00c..614fb5d08c5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM ruby:3.4.6-slim +FROM ruby:3.5.0-preview1-alpine3.21 LABEL maintainer Travis CI GmbH # packages required for bundle install From 647cf852b697fe14cf17b037fc4cce8575f297b3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 19 Sep 2025 04:52:55 +0000 Subject: [PATCH 7/8] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-THOR-10843853 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-569598 - https://snyk.io/vuln/SNYK-RUBY-PUMA-8062124 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674179 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674176 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674184 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674192 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-7164639 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732769 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732779 - https://snyk.io/vuln/SNYK-RUBY-PUMA-2437090 - https://snyk.io/vuln/SNYK-RUBY-REXML-7577227 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2840634 - https://snyk.io/vuln/SNYK-RUBY-REXML-7814166 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2413994 - https://snyk.io/vuln/SNYK-RUBY-PUMA-2400629 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2620374 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630623 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630898 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-3052880 - https://snyk.io/vuln/SNYK-RUBY-PUMA-1291014 - https://snyk.io/vuln/SNYK-RUBY-TZINFO-2958048 - https://snyk.io/vuln/SNYK-RUBY-PUMA-5846204 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510795 - https://snyk.io/vuln/SNYK-RUBY-REXML-7577228 - https://snyk.io/vuln/SNYK-RUBY-REXML-8309365 - https://snyk.io/vuln/SNYK-RUBY-MIDDLEMANCORE-20359 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6228056 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-PUMA-6146928 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3237242 - https://snyk.io/vuln/SNYK-RUBY-REXML-6861566 - https://snyk.io/vuln/SNYK-RUBY-REXML-7462086 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510789 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9789079 - https://snyk.io/vuln/SNYK-RUBY-ERUBIS-20482 - https://snyk.io/vuln/SNYK-RUBY-PUMA-1730572 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674188 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8453714 --- Gemfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile b/Gemfile index a0c60f2eb6a..4b4faa22773 100644 --- a/Gemfile +++ b/Gemfile @@ -3,7 +3,7 @@ source 'https://rubygems.org' ruby '2.6.3' gem 'faraday' -gem 'html-proofer', '~> 3.19', '>= 3.19.3' +gem 'html-proofer', '~> 3.16', '>= 3.16.0' gem 'jekyll', '>=3.1.6' gem 'jekyll-paginate' gem 'jekyll-redirect-from' @@ -19,7 +19,7 @@ gem 'rubocop', '>= 0.87.0', group: :test # All of this is for Slate / middleman -gem "middleman", "~> 4.1", ">= 4.1.8" +gem "middleman", "~> 4.6", ">= 4.6.0" # For syntax highlighting gem "middleman-syntax", ">= 3.3.0" From 038e4868703b2f97c7612d44a850c9091f49af40 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 7 Oct 2025 22:11:32 +0000 Subject: [PATCH 8/8] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-13052974 - https://snyk.io/vuln/SNYK-RUBY-RACK-13378928 - https://snyk.io/vuln/SNYK-RUBY-RACK-13378930 - https://snyk.io/vuln/SNYK-RUBY-RACK-13378932 - https://snyk.io/vuln/SNYK-RUBY-THOR-10843853 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-569598 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674179 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674176 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674184 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674192 - https://snyk.io/vuln/SNYK-RUBY-RACK-2848599 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-7164639 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732769 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732779 - https://snyk.io/vuln/SNYK-RUBY-REXML-7577227 - https://snyk.io/vuln/SNYK-RUBY-RACK-10074187 - https://snyk.io/vuln/SNYK-RUBY-RACK-9398129 - https://snyk.io/vuln/SNYK-RUBY-RACK-572377 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2840634 - https://snyk.io/vuln/SNYK-RUBY-REXML-7814166 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2413994 - https://snyk.io/vuln/SNYK-RUBY-RACK-1061917 - https://snyk.io/vuln/SNYK-RUBY-I18N-72582 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2620374 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630623 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630898 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-3052880 - https://snyk.io/vuln/SNYK-RUBY-PUMA-1291014 - https://snyk.io/vuln/SNYK-RUBY-RACK-2848600 - https://snyk.io/vuln/SNYK-RUBY-RACK-3356639 - https://snyk.io/vuln/SNYK-RUBY-RACK-569066 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274385 - https://snyk.io/vuln/SNYK-RUBY-TZINFO-2958048 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510795 - https://snyk.io/vuln/SNYK-RUBY-KRAMDOWN-585939 - https://snyk.io/vuln/SNYK-RUBY-RACK-8720151 - https://snyk.io/vuln/SNYK-RUBY-RACK-9058602 - https://snyk.io/vuln/SNYK-RUBY-REXML-7577228 - https://snyk.io/vuln/SNYK-RUBY-REXML-8309365 - https://snyk.io/vuln/SNYK-RUBY-MIDDLEMANCORE-20359 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6228056 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-KRAMDOWN-1087436 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3237242 - https://snyk.io/vuln/SNYK-RUBY-RACK-3237240 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274383 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274384 - https://snyk.io/vuln/SNYK-RUBY-REXML-6861566 - https://snyk.io/vuln/SNYK-RUBY-REXML-7462086 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510789 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9789079 - https://snyk.io/vuln/SNYK-RUBY-ERUBIS-20482 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674188 - https://snyk.io/vuln/SNYK-RUBY-RACK-10074188 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8453714 --- Gemfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index 4b4faa22773..0248bd42eda 100644 --- a/Gemfile +++ b/Gemfile @@ -4,12 +4,12 @@ ruby '2.6.3' gem 'faraday' gem 'html-proofer', '~> 3.16', '>= 3.16.0' -gem 'jekyll', '>=3.1.6' +gem 'jekyll', '>= 3.9.0' gem 'jekyll-paginate' gem 'jekyll-redirect-from' -gem 'puma', '>= 5.6.9' +gem 'puma', '>= 4.3.8' gem 'pry', group: :test -gem 'rack', '~> 1.0' +gem 'rack', '~> 3.0', '>= 3.0.0' gem 'rack-jekyll' gem 'rack-ssl-enforcer' gem 'rake'